task 27: add KindSleep and requested sleep metric

3 files changed, 39 insertions, 8 deletions

diff --git a/internal/c/generated_tracepoints.c b/internal/c/generated_tracepoints.c
index 68aa8a7..55164d5 100644
--- a/internal/c/generated_tracepoints.c
+++ b/internal/c/generated_tracepoints.c
@@ -14261,7 +14261,7 @@ int handle_sys_exit_clock_getres(struct syscall_trace_exit *ctx) {
     return 0;
 }
 
-/// sys_enter_clock_nanosleep is a struct null_event
+/// sys_enter_clock_nanosleep is a struct sleep_event
 SEC("tracepoint/syscalls/sys_enter_clock_nanosleep")
 int handle_sys_enter_clock_nanosleep(struct syscall_trace_enter *ctx) {
     __u32 pid, tid;
@@ -14271,15 +14271,25 @@ int handle_sys_enter_clock_nanosleep(struct syscall_trace_enter *ctx) {
     if (!ior_on_syscall_enter(tid, SYS_ENTER_CLOCK_NANOSLEEP))
         return 0;
 
-    struct null_event *ev = bpf_ringbuf_reserve(&event_map, sizeof(struct null_event), 0);
+    struct sleep_event *ev = bpf_ringbuf_reserve(&event_map, sizeof(struct sleep_event), 0);
     if (!ev)
         return 0;
 
-    ev->event_type = ENTER_NULL_EVENT;
+    ev->event_type = ENTER_SLEEP_EVENT;
     ev->trace_id = SYS_ENTER_CLOCK_NANOSLEEP;
     ev->pid = pid;
     ev->tid = tid;
     ev->time = bpf_ktime_get_boot_ns();
+    ev->requested_ns = -1;
+    if (ctx->args[2] != 0) {
+        struct __ior_timespec {
+            __s64 tv_sec;
+            __s64 tv_nsec;
+        } ts = {};
+        if (bpf_probe_read_user(&ts, sizeof(ts), (void *)ctx->args[2]) == 0) {
+            ev->requested_ns = ts.tv_sec * 1000000000LL + ts.tv_nsec;
+        }
+    }
 
     bpf_ringbuf_submit(ev, 0);
     return 0;
@@ -14311,7 +14321,7 @@ int handle_sys_exit_clock_nanosleep(struct syscall_trace_exit *ctx) {
     return 0;
 }
 
-/// sys_enter_nanosleep is a struct null_event
+/// sys_enter_nanosleep is a struct sleep_event
 SEC("tracepoint/syscalls/sys_enter_nanosleep")
 int handle_sys_enter_nanosleep(struct syscall_trace_enter *ctx) {
     __u32 pid, tid;
@@ -14321,15 +14331,25 @@ int handle_sys_enter_nanosleep(struct syscall_trace_enter *ctx) {
     if (!ior_on_syscall_enter(tid, SYS_ENTER_NANOSLEEP))
         return 0;
 
-    struct null_event *ev = bpf_ringbuf_reserve(&event_map, sizeof(struct null_event), 0);
+    struct sleep_event *ev = bpf_ringbuf_reserve(&event_map, sizeof(struct sleep_event), 0);
     if (!ev)
         return 0;
 
-    ev->event_type = ENTER_NULL_EVENT;
+    ev->event_type = ENTER_SLEEP_EVENT;
     ev->trace_id = SYS_ENTER_NANOSLEEP;
     ev->pid = pid;
     ev->tid = tid;
     ev->time = bpf_ktime_get_boot_ns();
+    ev->requested_ns = -1;
+    if (ctx->args[0] != 0) {
+        struct __ior_timespec {
+            __s64 tv_sec;
+            __s64 tv_nsec;
+        } ts = {};
+        if (bpf_probe_read_user(&ts, sizeof(ts), (void *)ctx->args[0]) == 0) {
+            ev->requested_ns = ts.tv_sec * 1000000000LL + ts.tv_nsec;
+        }
+    }
 
     bpf_ringbuf_submit(ev, 0);
     return 0;
diff --git a/internal/c/generated_tracepoints_result.txt b/internal/c/generated_tracepoints_result.txt
index 77339f5..6319861 100644
--- a/internal/c/generated_tracepoints_result.txt
+++ b/internal/c/generated_tracepoints_result.txt
@@ -19,7 +19,7 @@ sys_enter_chroot is a struct path_event
 sys_enter_clock_adjtime is a struct null_event
 sys_enter_clock_getres is a struct null_event
 sys_enter_clock_gettime is a struct null_event
-sys_enter_clock_nanosleep is a struct null_event
+sys_enter_clock_nanosleep is a struct sleep_event
 sys_enter_clock_settime is a struct null_event
 sys_enter_clone is a struct null_event
 sys_enter_clone3 is a struct null_event
@@ -192,7 +192,7 @@ sys_enter_munlock is a struct null_event
 sys_enter_munlockall is a struct null_event
 sys_enter_munmap is a struct mem_event
 sys_enter_name_to_handle_at is a struct path_event
-sys_enter_nanosleep is a struct null_event
+sys_enter_nanosleep is a struct sleep_event
 sys_enter_newfstat is a struct fd_event
 sys_enter_newfstatat is a struct path_event
 sys_enter_newlstat is a struct path_event
diff --git a/internal/c/types.h b/internal/c/types.h
index a496c1a..6c22b90 100644
--- a/internal/c/types.h
+++ b/internal/c/types.h
@@ -37,6 +37,8 @@
 #define EXIT_POLL_EVENT 32
 #define ENTER_MEM_EVENT 33
 #define EXIT_MEM_EVENT 34
+#define ENTER_SLEEP_EVENT 35
+#define EXIT_SLEEP_EVENT 36
 
 #define UNCLASSIFIED 0
 #define READ_CLASSIFIED 1
@@ -221,3 +223,12 @@ struct mem_event {
     __u64 length2;
     __u64 flags;
 };
+
+struct sleep_event {
+    __u32 event_type;
+    __u32 trace_id;
+    __u64 time;
+    __u32 pid;
+    __u32 tid;
+    __s64 requested_ns;
+};